Skip to content

CI: add least-privilege permissions to GitHub Actions workflows #405

CI: add least-privilege permissions to GitHub Actions workflows

CI: add least-privilege permissions to GitHub Actions workflows #405

Triggered via pull request July 14, 2026 11:54
Status Failure
Total duration 13m 20s
Artifacts

pana.yaml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 12 warnings
stream_feed_flutter_core
Process completed with exit code 1.
faye_dart
Process completed with exit code 1.
stream_feed
Process completed with exit code 1.
stream_feed_flutter_core
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
stream_feed_flutter_core
Failed to remove 'http.https://github.com/.extraheader' from the git config
stream_feed_flutter_core
It seems that this action doesn't have the required permissions to call the GitHub API with the token you gave. Consequently, no report will be made on GitHub. 1) Verify that GITHUB_TOKEN is granted read and write permissions in your repository settings: https://github.com/GetStream/stream-feed-flutter/settings/actions 2) If this repository is a fork, GitHub has reduced GITHUB_TOKEN's permissions for security reasons. Check this issue for more information: https://github.com/axel-op/dart-package-analyzer/issues/2
stream_feed_flutter_core
Resource not accessible by integration
faye_dart
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
faye_dart
Failed to remove 'http.https://github.com/.extraheader' from the git config
faye_dart
It seems that this action doesn't have the required permissions to call the GitHub API with the token you gave. Consequently, no report will be made on GitHub. 1) Verify that GITHUB_TOKEN is granted read and write permissions in your repository settings: https://github.com/GetStream/stream-feed-flutter/settings/actions 2) If this repository is a fork, GitHub has reduced GITHUB_TOKEN's permissions for security reasons. Check this issue for more information: https://github.com/axel-op/dart-package-analyzer/issues/2
faye_dart
Resource not accessible by integration
stream_feed
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
stream_feed
Failed to remove 'http.https://github.com/.extraheader' from the git config
stream_feed
It seems that this action doesn't have the required permissions to call the GitHub API with the token you gave. Consequently, no report will be made on GitHub. 1) Verify that GITHUB_TOKEN is granted read and write permissions in your repository settings: https://github.com/GetStream/stream-feed-flutter/settings/actions 2) If this repository is a fork, GitHub has reduced GITHUB_TOKEN's permissions for security reasons. Check this issue for more information: https://github.com/axel-op/dart-package-analyzer/issues/2
stream_feed
Resource not accessible by integration